5
CVSSv2

CVE-2005-1404

Published: 03/05/2005 Updated: 05/09/2008
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

MyPHP Forum 1.0 allows remote malicious users to spoof the username by modifying the (1) nbuser parameter to post.php or (2) sender parameter to privmsg.php.

Vulnerable Product Search on Vulmon Subscribe to Product

myphp forum myphp forum 3.0

myphp forum myphp forum 1.0

myphp forum myphp forum 2.0